This Policy explains what Glow (glow.moe) collects, why, and how we handle it when you create profiles, share links, connect accounts, and host images. Glow is built to be privacy‑light: we run cookie‑free analytics, we do not store the IP addresses of people who view profiles (the few narrow cases where we do keep an IP address, for security and abuse prevention, are listed under "Security and abuse records" below), and we collect only what we genuinely need. By using the Service, you consent to the practices described here.
The Service is operated by SplitFlux LLC ("Glow", "we", "us").
Changes to This Policy
We may update this Policy from time to time. Changes take effect when posted to the Service, and your continued use afterward means you accept the updated Policy. Please review it periodically.
Information We Collect
Account information. When you sign up, we receive the details you provide, such as your email address. Passwords (where used) are stored using industry‑standard hashing - we never store them in plain text. If you change your email, we may keep the previous address for a short period for account‑integrity and abuse‑prevention purposes only, then delete it.
Profile content. This is the content you choose to publish: display name, handle, pronouns, a free‑text location (a label you type yourself - not real geolocation and not auto‑detected), bio, links, and uploaded media (avatar, banner, background image/GIF/video). This is meant to be public on your profile according to your settings.
Connected‑account data. If you connect a third‑party service (Steam, PlayStation Network, Xbox, Discord, MyAnimeList, AniList, Simkl, Letterboxd, RetroAchievements, Roblox, Minecraft, GitHub, Chess.com, Lichess, Speedrun.com, League of Legends, Valorant, Overwatch, TikTok), we read the information that service makes available under your permission and settings - for example public stats, achievements, anime lists, or "now playing" status - and display the parts you choose on your profile. Where a service uses OAuth, we store the access/refresh tokens encrypted on our servers and refresh them server‑side; we never see your password for those services. You can disconnect a service at any time. If you link Discord and are in the glow Discord server, our bot sees your Discord status (online, idle, do not disturb, offline) and activity there, and keeps the time it last saw you online, so your profile can show "last seen" while you are offline.
Signatures. Verified members and Founding Creators can sign other members' pages. A signature shows publicly on that page with the signer's name, picture, the date, and the style they picked (including an autograph they drew, if any). The page owner can remove any signature, the signer can take theirs back, and they are deleted with either account. Staff may remove signatures or turn off signing on an account that misuses it.
Email lists. A member can add a "join my list" box to their page. If you type your email there, we send you one confirmation email; you are added to that member's list only after you confirm. The member sees your email address and can download their list to send you their own news with their own tools; Glow does not send newsletters on their behalf. You can leave a list anytime from the link in the confirmation email, which deletes your address from it, and unconfirmed addresses are not shared with the member.
Weather. If you turn on the weather next to your location, we send the location text you typed (never your IP address or device location) to OpenStreetMap's Nominatim service to find the place, and that place's rough coordinates to the Norwegian Meteorological Institute (MET Norway) for the current forecast. Both answers are cached on our servers. Weather data from MET Norway (CC BY 4.0); place data © OpenStreetMap contributors (ODbL).
Minecraft server integrations (SplitCraft). If you connect your glow account to a Minecraft server we operate (such as SplitCraft), or use "Sign in with glow" on it, we share your glow user ID, username, display name, avatar, and current Glow+ subscription status with that server so it can show your in‑game presence and grant subscription‑linked perks. Your public profile details may also be read for in‑game profile lookups. This sharing stops after you unlink or revoke access. Both glow.moe and SplitCraft are operated by SplitFlux LLC (Nevada, USA).
Analytics (cookie‑free, no IP stored in analytics). To understand how public profiles perform, we log a minimal event when a profile is viewed or a link is clicked. That event records the profile, the time, the referring site and a traffic‑source label where available (for example "TikTok" or "Direct"), an approximate country, a general device type, the browser and operating‑system family, and the language the visitor uses: the language setting their browser already sends with every request, and the site language Glow shows them. We use the language only as a count, to decide which languages to translate Glow into next. To count unique visitors without cookies, the event also carries a one‑way hashed key made from the network address and browser information combined with a secret value and the date; it changes every day, cannot be turned back into an address, and cannot follow anyone from one day or site to the next. For the profile owner's analytics we may also record how long the profile stayed open in the visitor's browser and which parts of it they opened (for example a tab, a connected‑account card or the profile song), attached to the same anonymous event. We count visits to Glow pages that arrive from AI assistants (such as ChatGPT or Perplexity) in the same anonymous way. The approximate country is derived from the network address at the moment of the request and the address is then discarded - we do not store visitor IP addresses in analytics and we do not use cookies or any cross‑site identifiers for analytics. We do not attempt to identify individual visitors.
Dashboard tools. When you use some dashboard tools (such as the design studio), we count how often you open them, save from them and which of their parts you use, per day, tied to your account. We use these counts only to decide what to improve, they are visible only to Glow staff, and they are deleted with your account.
Diagnostics. If the site hits an error, we may record a minimal diagnostic event (such as your account ID if signed in, a session reference, and browser/device type) to help us fix problems. Consistent with the above, we do not retain IP addresses in these logs. These logs are used only for stability and security, never for advertising or tracking.
Security and abuse records (IP addresses). Outside of analytics we keep an IP address in a few narrow cases, for security and abuse prevention only: your account's most recent activity time and IP address (so we can secure accounts and act on abuse); the browsers you choose to trust at login (so we can show you where you are signed in and let you revoke them); the sender of an anonymous question on an ask page (kept for 30 days and then deleted unless the question was reported, never shown to the person who received it; a salted hash of it is kept so the recipient can block a sender); the author of a guestbook entry; the person who sent an abuse report (to stop report spam); and the sign‑up that used a referral link (to prevent self‑referral fraud). Apart from the 30‑day limit above, these are kept only as long as the related record exists. They are visible only to Glow staff and are never used for advertising or analytics.
Sensitive information (please do not provide). Glow does not need and does not ask for sensitive personal data - such as government identification numbers, financial or payment‑card numbers, health data, precise location, or special‑category data (for example, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or sexual orientation). Please do not submit it through Glow. If you choose to publish such information on your public profile, you do so at your own risk.
Cookies
Glow does not use cookies for analytics. We use only strictly necessary cookies or similar technology to keep you signed in, protect your account, and enable core functionality, plus a few preference cookies that remember choices on your own device (such as your site language, dashboard theme, color palette and time zone). When you are signed in, we also save the dashboard color palette you use to your account, so we can see which palettes members like. None of them track you across sites. Our infrastructure may be served through a security/CDN provider (e.g. Cloudflare) that sets technically necessary cookies for routing, load balancing, and DDoS protection. Disabling essential cookies may break sign‑in or access.
How We Use Your Information
We use the information above to operate and improve Glow: authenticate you and keep secure sessions; display your profile, links, and connected stats; measure profile views and link clicks without cookies; detect and fix errors; prevent fraud, spam, and abuse; respond to support; and comply with the law and enforce our Terms.
Emails. We send the account emails you need to use Glow: email verification, sign-in and security alerts, and billing notices (such as a heads-up a few days before a free trial ends or a yearly plan renews). We also send a few tips to help you set up your page; you can turn them off anytime under "tips" in Settings. Newsletter emails about new features, events and limited-time drops go out only if you opt in (at sign-up or under "news & events" in Settings). The unsubscribe link in any tip or newsletter email turns both off. Account emails keep coming for as long as you have an account.
Legal Bases (where required)
Where laws such as the GDPR apply, we process personal data to perform our contract with you (providing the Service), for our legitimate interests (security, abuse prevention, cookie‑free analytics, product improvement), with your consent where we ask for it (such as connecting a third‑party account), and to meet legal obligations.
Data Retention and Deletion
We keep personal data only as long as needed for the purposes above or as required by law. Analytics events contain no IP address and no cookie identifier; they are kept for as long as the profile they belong to exists, so its owner can see all‑time statistics, and they are deleted when the profile or account is deleted. Records of which parts of a profile visitors opened are deleted after 13 months. IP addresses on anonymous questions are deleted after 30 days unless the question was reported. Anonymous counts of visits that arrive from AI assistants are kept as site‑wide statistics. Sessions end when they expire or are revoked. When you delete your account and we verify the request, we permanently delete your personal account data and user‑generated content from active systems. Limited backups or logs may persist briefly for security or legal compliance, then are purged. We do not keep deleted data for business or analytical use.
Disclosure of Your Information
We do not sell personal data. We share information only with service providers who process it on our behalf to run the Service (such as cloud hosting, content delivery and security, email delivery, and payment processing through Stripe). These providers are bound to use it only for those purposes. We may disclose information where required by law or valid legal process, to protect the rights and safety of users or the Service, or in connection with a business transfer (where the successor remains bound by protections no less than these).
Third‑Party Services and Links
Profiles and connected integrations may link to or pull from third‑party services that we do not control. Any data you provide directly to those services is governed by their own privacy policies. We recommend reviewing them before connecting an account or following a link.
glow is not affiliated with, endorsed by, or sponsored by Blizzard Entertainment, Valve, Discord, Riot Games, Sony Interactive Entertainment, Microsoft, TikTok, Meta, or any other service you can connect. Overwatch and Battle.net are trademarks of Blizzard Entertainment, Inc.; all other names and logos belong to their owners and are used only to identify the service you are connecting.
Browser Extension (glow L!VE)
glow L!VE is an optional browser extension that shows what you are watching on your glow profile. It is separate from the website and installing it is entirely your choice.
What it reads. On supported anime streaming sites, and only while a video is playing, the extension reads the title and episode of what is on screen, taken from the page title and its public metadata. It does not read passwords, form fields, payment details, other browsing activity, or pages on sites it does not support.
Where it goes. That title and episode are sent only to your own glow profile, to power your live "now watching" status and your /anime page. They are not sold or shared with anyone else.
Marking episodes. If you use the on‑page widget to mark an episode, set a status, or rate a series, that update is sent to the AniList or MyAnimeList account you linked on glow, through the connection you set up there.
Its access key. The extension uses a dedicated activation token that is separate from any desktop key and is limited to anime activity only. You can revoke or regenerate it at any time from your glow dashboard without affecting anything else, which immediately stops any copy of the extension from using the old key.
Permissions. The extension needs to run on the pages you watch so it can tell that a video is playing and which episode it is. Streaming players are often embedded from other domains, so it requests broad page access for that detection only. It takes no action on pages that are not playing anime.
Desktop App (glow L!VE)
glow L!VE is also available as an optional desktop app that shows what you are playing on your glow profile and, if you enable it, on your Discord status. It is separate from the website and installing it is entirely your choice.
What it reads. While it runs, the app reads game state from the games' own local interfaces on your machine: the League of Legends client (your lobby, queue, champion select, loading screen, and your client profile such as rank, mastery, recent games, challenges and your own status message) and its live match API; the Riot Client's presence for VALORANT (only your own: menus, agent select, map, mode, score, rank, level); Dota 2's Game State Integration; Forza's telemetry output; the Steam client's record of the running game; and the Roblox client's log files (only which experience you joined; the server address in those logs is never used or sent). For Steam it also fetches your public Steam profile card (display name, avatar, level, and the game's status line) from Steam's public endpoint - the same card anyone sees when hovering your name in a Steam friends list. It reads only from those game interfaces, never your chat messages, friends list, store or login, and it sees nothing while it is closed.
What it writes. To receive Dota 2's game state, the app places one small configuration file in Dota 2's game folder (gamestate_integration_glow.cfg). Dota 2 only uses it if you add the -gamestateintegration launch option; deleting the file turns it off.
Other players. In a League lobby, champion select or loading screen, your page shows the other players as the client shows them to you (their Riot IDs, levels, banners, roles and picks). Your L!VE settings can hide your own name and your opponents' names.
Where it goes. Game data is sent only to your own glow profile, to power your live "now playing" status and your /live page. Raw client data that carries account identifiers is kept on our servers for a few minutes at most, only to build your page, and is never shown or shared. Live status expires on its own shortly after the app stops pushing. It is not sold or shared with anyone else.
Discord Rich Presence. If Discord is open on your machine, the app can set your Discord activity through Discord's local connection. The catalog used to match games to their Discord titles ships inside the app, so the app makes no requests to Discord's servers.
Its access key. The app is paired from your browser: it opens glow.moe and you approve the device. You can revoke the pairing at any time from your glow dashboard, which immediately stops any copy of the app from pushing to your profile.
Payments
Glow offers an optional paid plan, Glow+. Payments are handled by a third‑party payment processor, Stripe, Inc.: your card details go directly to Stripe and we never receive or store full payment‑card numbers. We receive and keep only what we need to run your subscription - a Stripe customer and subscription reference, the plan and billing interval, its status and renewal date, your billing country and the price tier you checked out at, and the type (credit, debit or prepaid) and issuing country of the card you paid with, as reported by Stripe. We use these to decide free‑trial and regional‑price eligibility and to prevent fraud. Stripe processes your payment data under its own privacy policy.
Gifts. If you buy Glow+ as a gift, we keep a record of the gift: who sent it, who received it, how many months, the note and whether it was sent anonymously, and its payment status. The recipient sees the note and, unless you chose to stay anonymous, your username. The record is kept with the account and is used to deliver, show and, if needed, refund the gift.
International Transfers
Our infrastructure and providers may operate in more than one country. Where required, we apply appropriate safeguards for cross‑border transfers and protect your information regardless of where it is processed.
Security
We use reasonable technical and organizational safeguards - including encrypted transport, encrypted storage of third‑party tokens, hashed passwords, and access controls - to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security. If you suspect unauthorized access, contact support@glow.moe immediately.
Data breach notification. If we become aware of a security breach that compromises your personal data, we will act promptly to investigate and contain it, and - where and to the extent applicable law (such as the GDPR) requires - notify the relevant supervisory authority and affected individuals within the timeframes and in the manner the law requires. Because Glow deliberately collects little personal data - primarily your email address, the profile content you choose to make public, and encrypted third‑party tokens - the information exposed by such an event is generally limited. We hold no IP addresses of profile viewers, no analytics cookies, no precise location, and no full payment‑card details.
Your Rights
Depending on where you live (for example under the GDPR), you may have the right to access the data we hold about you, request a copy, correct inaccuracies, request deletion, restrict or object to certain processing, and withdraw consent where processing relies on it. Glow tries to honor these rights for all users where practical. We do not carry out automated decision‑making with significant legal effects. To exercise a right, use your account settings or contact privacy@glow.moe; we may ask for reasonable proof of identity. You may also complain to your local data protection authority, but we encourage you to contact us first.
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the "CCPA"), gives you the right to know what personal information we collect and how we use and disclose it, to request access to or a copy of that information, to request its correction or deletion, and to not be discriminated or retaliated against for exercising these rights. We do not sell or share your personal information for cross‑context behavioral advertising as those terms are defined under the CCPA, and we do not knowingly sell or share the personal information of consumers under 16 years of age. To exercise a California right, contact us at privacy@glow.moe; you may use an authorized agent, and we may verify your request before acting on it. Residents of other U.S. states with similar privacy laws may have comparable rights, which we honor where they apply.
Children
Glow is not intended for children under 13 (or the higher minimum age required where you live). We do not knowingly collect data from children below that age. If you believe a child has provided us personal information, contact support@glow.moe and we will act appropriately.
Contact
Privacy questions or requests: privacy@glow.moe · General support: support@glow.moe